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Listing of Claims: 

1 . (currently amended) An apparatus for collecting and transmitting biometric data over a 
Wtwork, the apparatus comprised of: 

\ a sensor to collect biometric data; [[and]] 

\ a biometric template generator, coupled to the sensor, to convert the biometric data 
into a biometric template ; and 

a security code generator coupled to the sensor to sign the biometric data with a 
signature corresponding to the sensor . 

2. (original) The apparatus of claim 1, further comprising an output interface, coupled to the 
biometric template generator, to output the biometric template to a network. 

3. (canceled) \ 

4. (currently amended) The apparatus of claim [[3]] 1, wherein the security code generator 
implements a signing technique using at least one of a key and a token. 

5. (currently amended) The apparatus of claim [[3]] 1., further comprising an output 
interface, coupled to the biometric templat^generator, to output the signed biometric 
template to a network. \ 

6. (original) The apparatus of claim 1, further comprising an image processor coupled 
between the sensor and the biometric template generator to determine whether the biometric 
data is suitable for biometric template generation. \ 

7. (original) The apparatus of claim 1, further comprising a bion 
two biometric templates to determine whether the two biometric 
generate a match result. 



letric matcher to compare a 
iplates match and to 
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,8. (original) The apparatus of claim 7, wherein the match result is signed. 

9. (Original) The apparatus of claim 1 ? further comprising a security module to decrypt and 
validate a previously enrolled biometric template received via the network. 

10. (origins) The apparatus of claim 9, wherein the received previously enrolled biometric 
template is signed, encrypted, and comprises a validation key. 

11. (currently amended) A cryptographic system, comprising: 

an imaging device for collecting biometric data; 

a code generatoAo generate a digital signature corresponding to the im aging device; 

a key generator to generate at least one key; 

a private key storage device coupled to the key generator; and 

a public key storage device coupled to the key generator. 

12. (original) The system of claim 1 IV further comprising: 

a signature validator to generate V public key; and 
an encryptor to encrypt data using tl^e public key; and 
a decryptor. 



13. (original) The system of claim 11, wherein the\ey generator comprises logic to create an 
asymmetric key pair. 

14. (currently amended) A method of providing security to^nometric data, comprising: 

generating a key pair comprising an imaging device public key and an imaging device 
private key at an imaging device; 

storing the imaging device private key in a storage device at^he imaging device; 

transmitting the imaging device public key from the imaging device to a certification 
authority; 

generating an imaging device public key certificate at the certificatio\authority; 
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\ generating a certification authority public key certificate at the certification authority; 
[[andN 

transmitting the imaging device public key certificate and the certification authority 
public ke\certificate to the imaging device ; and 

signing the biometric data with the imaging device private key , 

15. (original) The method of claim 14, further comprising storing the imaging device public 
key certificate anosthe certification authority public key certificate in the storage device at the 
imaging device. \ 

16. (original) The method of claim 14, further comprising: 

generating an asymmetric key pair comprising a public key and a private key at a 
server; \ 

storing the private key in a storage device at the server; 

transmitting the public key from the server to a certification authority; 

generating a server public Key certificate at the certification authority; 

generating a second certification authority public key certificate at the certification 
authority; and \ 

transmitting the server public k6v certificate and the second certification authority 
public key certificate to the imaging devices 

17. (currently amended) A method of exchanging biometric information between an imaging 
device and a server, comprising: \ 

authenticating the server at the imaging device; 
obtaining a biometric sample at the imaging device; 

signing the biometric sample at the imaging device with a signature corresponding to 
the imaging device ; \ 

generating a data package comprising the biometric\sample, a token, the signature, 
and an imaging device public key certificate; \ 

transmitting the data package to the server; \ 

receiving the data package at the server; \ 

Page 4 of 1 1 \ 



DOCKET NO.: IRID-0479 PATENT 
Application No.: 10/020,791 
Office Act ion Dated: June 24, 2003 

authenticating the imaging device at the server; 
validating the signature and the token at the server. 



18. (original) *Khe method of claim 17, wherein authenticating the server at the imaging 
device comprises: 

sending a reqiifc^jt for a server public key certificate and the token from the imaging 
device to the server; 

generating the token aKrtie server; 
retrieving the server publuskey certificate from a storage device; 
transmitting the server public R^y certificate and the token to the imaging device; and 
validating the server public key ceHificate at the imaging device. 

19. (original) The method of claim 18, wherein validating the server public key certificate at 
the imaging device comprises using a certification authority public key certificate. 



20. (original) The method of claim 17, further comprising encrypting the data package using 
the server public key certificate prior to transmitting the dara^ package to the server, and 
decrypting the data package at the server. 
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